EUVD-2005-1300

Malware in sbrugna...

CVE-2005-1297

Cross-site scripting XSS vulnerability in the include.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument...

CVE-2005-1296

include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...

CVE-2005-1297

CVE-2005-1297 concerns a cross-site scripting (XSS) vulnerability in the include.cgi script that allows remote attackers to inject arbitrary web script or HTML via the argument. Affected component: include.cgi. Root cause: insufficient input sanitization in include.cgi leading to script injection...

CVE-2005-1296

The CVE-2005-1296 issue involves an include.cgi script that allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. The available data indicate a remote, network-accessible flaw with a CVSSv2 base score of 7.5 (High) and partial impacts to confidentiality, ...

CVE-2005-1295

Technical details (affected products, precise root cause, affected versions, and exploitability) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

remote command execution in include.cgi script

Tunis 24/04/2005 BUG found by fireboy [email protected] THERE ARE SOME BUGS IN include.cgi SCRIPT THAT CAN SHOW SENSILBLES FILES IN A SYSTEM OR EXECUTE COMMANDS IN THE TARGET HOST WICH CAN COMPROMISE IT. IT IS ONLY FOR SECURITY AND EDUCATIONAL PURPOSE 1file showing...

CVE-2005-1295

include.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...

CVE-2005-1297

Cross-site scripting XSS vulnerability in the include.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument...

CVE-2005-1296

include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...